> Markdown version of [/jobs/ext/188588-azure-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/188588-azure-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Azure Cloud Security Engineer - **Company:** Yoh Services LLC - **Location:** McKinney, TX, United States - **Experience:** Expert - **Salary:** $124,800.0 - $156,000.0 - **Contract:** Temporary to permanent - **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, Data Security, Python (Programming Language), Key Management, Platform as a Service (PAAS), Windows PowerShell, Role-Based Access Control, Azure Active Directory, Cloud Services, Zero Trust Network Access, Security Information and Event Management, Systems Integration, Scripting, Data Classification, Firewalls (Computer Science), Azure Security Center, Falcon Platform, Bicep, Microsoft Sentinel, Api Design, Terraform, Cyber Warfare, Prisma Cloud Platform, Splunk, Azure Resource Manager, Key Vault - **Published:** May 19, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=428a4e862eacab0b ## About the Role * 5+ years of experience in cloud security or cloud engineering * Strong hands-on experience securing Microsoft Azure environments (90%+) * Experience with: * Microsoft Defender for Cloud / Azure Security Center * Microsoft Entra ID (Azure AD), Conditional Access, RBAC * Azure networking (VNets, NSGs, Private Endpoints, Firewall) * Familiarity with SIEM/SOAR platforms (e.g., Microsoft Sentinel, CrowdStrike, Splunk) * Experience with Infrastructure-as-Code and automation * Strong understanding of Zero Trust architecture principles * Experience with CNAPP platforms (e.g., Wiz, Prisma Cloud, CrowdStrike CNAPP) * Knowledge of SaaS security monitoring and API-based integrations * Familiarity with Zscaler (ZIA/ZPA) or similar secure access solutions * Experience in hybrid environments (Azure + on-prem) * Relevant certifications: * AZ-500 (Azure Security Engineer) * CISSP, CCSP, or equivalent ## Description We are seeking a Cloud Security Engineer with a strong focus on Microsoft Azure to design, implement, and operate security controls across a predominantly Azure-based environment. This role will partner closely with Cloud Engineering, Identity, and Cyber Operations teams to ensure secure-by-design cloud deployments, continuous monitoring, and alignment with enterprise security frameworks., * Design and implement security controls across Azure services including compute, storage, networking, and PaaS offerings * Secure Azure landing zones using best practices aligned to Zero Trust principles * Implement and manage Azure-native security services (Defender for Cloud, Conditional Access, Key Vault, etc.) * Partner with architecture teams to embed security into cloud design patterns and reference architectures * Monitor and respond to cloud security alerts and incidents across Azure environments * Integrate Azure logs with SIEM/SOAR platforms (e.g., Sentinel, CrowdStrike, etc.) * Support incident response activities related to cloud threats and misconfigurations * Develop automation for detection and response using Azure-native tooling * Implement and enforce strong identity controls leveraging Microsoft Entra ID * Design Conditional Access policies and support passwordless initiatives (WHfB, FIDO2, etc.) * Ensure least privilege access using RBAC, PIM, and Just-in-Time access models * Manage cloud security posture using tools such as Defender for Cloud and/or CNAPP platforms * Identify and remediate misconfigurations, vulnerabilities, and compliance gaps * Partner with engineering teams to prioritize and remediate risks based on business impact * Implement data protection controls across Azure services (encryption, DLP, data classification) * Secure data flows between cloud services and external integrations * Support compliance initiatives (NIST, CIS, ISO, PCI, etc.) through technical control implementation * Integrate security into CI/CD pipelines (IaC scanning, secrets management, policy enforcement) * Support secure Infrastructure-as-Code (Terraform, Bicep, ARM templates) * Automate security controls and validation through scripting (PowerShell, Python, etc.) ## Related Videos - [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets) - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)